Nordic Hemp Cooperation, Vabriku 3a, Vahi, Tartumaa, Estonia 60534 (“Nordic Hemp”) wants to protect your data. This text describes how Nordic Hemp, as data controller, collects and processes your personal data in connection with our services and the use of hemflake.eu .
Please read the notice carefully so that you know how we process, use and pass on your personal data.
1. Categories of personal data and purposes
We process personal data for the following purposes and on the mentioned processing basis:
We also use social media solutions to brand and market our products (eg Facebook Custom Audience ). In this connection, we send a hashet e-mail address to the social media in question, which we have received from you in other contexts (eg. in connection with subscribing to newsletters or when purchasing on our webshop), which will present you with sponsored links in your feed on their platform.
This disclosure is based on our legitimate interest in marketing our products and brands (GDPR Article 6 (1) (f)).
Improving our website
Interaction with Nordic Hemp on social media
2. Transmission and transfer of personal data
We pass on your personal information as described above. In addition, we leave personal information to partners, including IT suppliers, who process personal information on behalf of Nordic Hemp. Such partners are subject to Nordic Hemp’s instructions in relation to the storage and processing of personal data.
Some data processors or sub-data processors can be established outside the EU. Transfers out of the EU are based on the EU Commission’s Standard Contracts, or on the EU-US Privacy Shield .
3. Storage period
We store the personal data for as long as is necessary to fulfill the above purposes and to comply with applicable law, including the accounting laws of the countries in which we operate.
4. Your rights
With certain statutory exceptions, you can always request access to your personal data.
You can also ask us to correct or limit the processing of your personal data.
You can request to receive the personal data you provide in a structured, commonly used and machine-readable format, if our processing of the data takes place on the basis of your consent or a contract that you have entered into with us (data portability).
We will delete your personal data upon request, unless we have the authority to continue processing.
You can also submit a complaint to the supervisory authority to the Estonian Data Protection Agency.
5. Right of objection
You can object to any processing that takes place in the light of our legitimate interests (Article 6 (1) (f) of the Personal Data Regulation). In that case, we will discontinue the processing unless it can continue because our legitimate interest takes precedence over your interest or because the personal data is necessary for a legal claim to be determined, asserted or defended.
6. Changes to the notice
We reserve the right to change this privacy statement.
Version 1, August 25, 2021